Commit Graph

436 Commits

Author SHA1 Message Date
Gianfranco Costamagna
318627819b mosquitto: apply upstream proposed patches to use cmake build system,
simplifying a lot the build and install process.

Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <gianfranco.costamagna@abinsula.com>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-25 12:44:25 -08:00
Pierre-Jean Texier
35832ff73e firewalld: upgrade 0.7.2 -> 0.7.3
See full changelog https://github.com/firewalld/firewalld/releases/tag/v0.7.3

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-24 09:25:46 -08:00
Khem Raj
9322d09dc4 crda: Fix build with python3
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-22 09:56:34 -08:00
Khem Raj
66454b26ff meta-networking: Remove using python2
This change makes the parsing go though, we still might have build
issues, which will be reported in world builds seprately

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-22 09:56:34 -08:00
Zang Ruochen
02d0a59daa dhcpcd: upgrade 8.1.1 -> 8.1.5
-files/0001-dhcpcd-Fix-build-error-with-musl.patch
Removed since this is included in 8.1.5.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-15 23:17:45 -08:00
Yi Zhao
d5e2cb3845 crda: fix UDEV_RULE_DIR
The default UDEV_RULE_DIR is ${nonarch_base_libdir}.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-14 21:53:06 -08:00
Wang Mingyu
b437b53f25 kea: upgrade 1.7.2 -> 1.7.3
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-06 19:22:26 -08:00
Wang Mingyu
65c38c877d wolfssl: upgrade 4.2.0 -> 4.3.0
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-06 19:22:26 -08:00
Wang Mingyu
263bbaf3ba lftp: upgrade 4.8.4 -> 4.9.0
fix-gcc-6-conflicts-signbit.patch
Removed since they are included in 4.9.0

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-06 19:22:26 -08:00
Yi Zhao
cec8426a93 samba: upgrade 4.10.10 -> 4.10.11
Security fixes:

CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS
                management server (dnsserver).
CVE-2019-14870: DelegationNotAllowed not being enforced in protocol transition
                on Samba AD DC.

See: https://www.samba.org/samba/history/samba-4.10.11.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-06 19:22:25 -08:00
Trevor Gamblin
f29dfed64a samba: disable guest access and anonymous queries
Guest accounts for Samba are a known potential vulnerability
(see https://www.tenable.com/plugins/nessus/26919) where info
about the host can be obtained without proper access. The option
"map to guest = bad user" allows login attempts with usernames
that don't exist to map to the guest account, while the
"restrict anonymous" value (implicitly set to 0 before this patch)
would allow any queries to obtain user and group list information.

Raise the default security level by setting "restrict anonymous"
to "1" and "map to guest" to "never" to avoid providing user/group
info to unauthenticated users and reject login attempts with an
invalid password, respectively.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-25 08:55:26 -08:00
Khem Raj
04b8b39163 cannelloni: Include stdexcept for runtime_error
Fixes
error: 'runtime_error' is not a member of 'std'
             throw std::runtime_error("Allocation error.");
                        ^~~~~~~~~~~~~

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-23 15:03:15 -08:00
Khem Raj
dcb22ae7aa civetweb: Upgrade to latest tip
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-20 16:07:50 -08:00
Khem Raj
179d091298 firewalld: Package firewalld files
ERROR: firewalld-0.7.2-r0 do_package: QA Issue: firewalld: Files/directories were installed but not shipped in any package:
  /usr/lib
  /usr/lib/firewalld
  /usr/lib/firewalld/zones

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-20 16:07:50 -08:00
Khem Raj
61d823300e cannelloni: Update to latest and fix multilib builds
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-20 16:07:50 -08:00
Wang Mingyu
7046bf534e kea: upgrade 1.7.0 -> 1.7.2
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-18 15:47:20 -08:00
Leon Anavi
e0b841376f mosquitto: update to 1.6.8
Bugfix release. For details, see:

  https://mosquitto.org/blog/2019/11/version-1-6-8-released/

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-15 21:08:54 -08:00
Changqing Li
12a1bd3eba samba: fix wrong shebang for python3
fix wrong shebang "#!/usr/bin/env python3/"

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-13 18:29:14 -08:00
Kai Kang
1a456aa758 blueman: disable appindicator support
libappindicator is a library to allow applications to export a menu into
the Unity Menu bar. Unity is not supported in openembedded, so disable
appindicator support for blueman.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-10 16:21:08 -08:00
Jacopo Dall'Aglio
ecdab14135 netplan: add recipe
Canonical's Netplan is a network configuration abstraction renderer written in
Python. It's compatible with NetworkManager and systemd-networkd.

Signed-off-by: Jacopo Dall'Aglio <jacopo.dallaglio@kynetics.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-05 23:01:06 -08:00
Denys Dmytriyenko
4c00e5fed9 recipes: rename distro_features_check to features_check
Avoid warning due to the class rename in OE-Core.

Signed-off-by: Denys Dmytriyenko <denys@ti.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-21 17:51:37 -08:00
Stefan Agner
82ecc0e69f networkmanager: do not deploy unnecessary udev rule file
The 84-nm-drivers.rules is not required for systemd-udevd versions
v210 and later. The file has been split into a separate file so
distributions with a new enough systemd version can drop it. See
also:
1e03758262

I noticed this while investigating into a warning show during
bootup:
  /usr/lib/udev/rules.d/84-nm-drivers.rules:10 Invalid value "/bin/sh -c
  'ethtool -i $1 | sed -n s/^driver:\ //p' -- $env{INTERFACE}" for PROGRAM
  (char 24: invalid substitution type), ignoring, but please fix it.

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-20 06:57:07 -08:00
Denys Dmytriyenko
865ecb2083 mbedtls: upgrade 2.16.2 -> 2.16.3
* Mbed TLS 2.16.3 is a maintenance release of the Mbed TLS 2.16 branch, and
  provides bug fixes and minor enhancements.

https://github.com/ARMmbed/mbedtls/releases/tag/mbedtls-2.16.3

Most importantly, this fixes breakage on ARMv5TE platforms:

* Fix the build on ARMv5TE in ARM mode to not use assembly instructions that
  are only available in Thumb mode.

https://github.com/ARMmbed/mbedtls/pull/2169

Signed-off-by: Denys Dmytriyenko <denys@ti.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-13 07:15:17 -08:00
Yi Zhao
0d02e6c03c samba: upgrade 4.10.8 -> 4.10.10
Security fixes:

CVE-2019-10218: Client code can return filenames containing path
                separators.
CVE-2019-14833: Samba AD DC check password script does not receive the
                full password.
CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP
                server via dirsync.

See: https://www.samba.org/samba/history/samba-4.10.10.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-07 21:17:25 -08:00
Andreas Oberritter
2462268fed samba: fix installation for minimal build
| chmod: cannot access '.../image/etc/sudoers.d': No such file or directory
| sed: can't read .../image/usr/bin/samba-tool: No such file or directory

Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-07 17:43:44 -08:00
Khem Raj
9429dba394 miniupnpd: Build config.h before full build
This fixes a race condition e.g.

testminissdp.c:15:10: fatal error: config.h: No such file or directory
   15 | #include "config.h"
      |          ^~~~~~~~~~
compilation terminated.
<builtin>: recipe for target 'testminissdp.o' failed

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-01 17:22:53 -07:00
Khem Raj
5a4ae66242 miniupnpd: Update to 2.1.20191006
Forward port the patches

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-01 17:22:53 -07:00
Yi Zhao
fb87b445df freeradius: set CLEANBROKEN
Fixed make clean error:
  NOTE: make clean
  Makefile:36: *** Missing 'Make.inc' Run './configure [options]' and retry.  Stop.
  ERROR: oe_runmake failed

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-01 17:22:53 -07:00
Zheng Ruoqin
b076ad8dd7 dhcpcd: upgrade 8.0.2 -> 8.1.1
1) Add 0001-dhcpcd-Fix-build-error-with-musl.patch to fix musl build error.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-01 17:22:52 -07:00
Zang Ruochen
ceaa3f7701 wolfssl: upgrade 4.1.0 -> 4.2.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-25 10:32:45 -07:00
Zang Ruochen
3d58a188bb snort: upgrade 2.9.14.1 -> 2.9.15
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-25 10:32:45 -07:00
Kai Kang
863f9023bc blueman: fix fail to enable bluetooth issue
When launch blueman-manager while bluetooth is disable, it may fails
with error:

  Failed to enable bluetooth

Because when get bluetooth status right after change its status, the
status may not be updated that plugin applet/KillSwitch.py sets the
bluetooth status via method of another dbus service which doesn't return
immediately.

Provides a new dbus method for PowerManager which checks whether dbus
method SetBluetoothStatus() has finished. Then it makes sure to get
right bluetooth status.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-25 10:32:45 -07:00
Christophe PRIOUZEAU
843e0ce815 libnet: Clarify BSD license variant
The License of libnet is BSD-3-Clause.

Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-24 01:01:43 -07:00
Trevor Gamblin
9ab4e11fd4 freeradius: fix PIDFile path in radiusd.service file
radiusd.service references a legacy path for its PIDFile, which
results in a warning at boot:

systemd[1]: /lib/systemd/system/radiusd.service:7: PIDFile= references a path
below legacy directory /var/run/, updating /var/run/radiusd/radiusd.pid →
/run/radiusd/radiusd.pid; please update the unit file accordingly.

Modify the recipe's radiusd.service file to use the correct path.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-21 04:41:24 -07:00
Yi Zhao
df6804c40e freeradius: fix CVE-2019-10143
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2019-10143

Patch from:
1f23377396

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-16 20:28:39 -07:00
Changqing Li
62a4970d2e kea: fix kea-dhcp4.service/kea-dhcp6.service start up failed
After upgrade to 1.7.0, path of database file changed from
/var/kea to /var/lib/kea, correct the path to fix service
start failed problem

DHCP6_CONFIG_LOAD_FAIL configuration error using file:
/etc/kea/kea-dhcp6.conf, reason: Unable to open database:
unable to open '/var/lib/kea/kea-leases6.csv'

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-16 20:28:39 -07:00
Adrian Bunk
1db745db41 networkmanager: Upgrade 1.18.2 -> 1.18.4
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-16 20:28:39 -07:00
Paul Eggleton
a21cc89423 mosquitto: update to 1.6.7
Bugfix release. For details, see:

  https://mosquitto.org/blog/2019/09/version-1-6-7-released/

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-09 23:27:15 -07:00
Zang Ruochen
5386a37705 firewalld: upgrade 0.7.1 -> 0.7.2
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-08 22:10:54 -07:00
Trevor Gamblin
5d23c6329e freeradius: add -latomic for armv5
freeradius fails to build for armv5:

| *** Warning: Linking the executable build/bin/local/radeapclient against the loadable module
| *** libfreeradius-server.so is not portable!
|
| *** Warning: Linking the executable build/bin/local/radeapclient against the loadable module
| *** libfreeradius-eap.so is not portable!
path -Wl,/yow-lpggp31/tgamblin/freeradius.build/tmp-glibc/work/armv5e-oe-linux-gnueabi/freeradius/3.0.19-r0/git/build/lib/local//.libs
/arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_compare_exchange_8'
/arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_load_8'
/arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_store_8'
| collect2: error: ld returned 1 exit status
| scripts/boiler.mk:630: recipe for target 'build/bin/local/radeapclient' failed

Explicitly link libatomic to fix the issue.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-08 12:54:16 -07:00
Ovidiu Panait
e17a684f28 kea: Disable parallel install
According to configure.ac, make install might fail when run with multiple jobs:

$ tail -15 log.do_configure
...
When running "make install" do not use any form of parallel or job
server options (such as GNU make's -j option). Doing so may cause
errors.
...

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-04 19:11:55 -07:00
Callaghan, Dan
1eaeb89b94 firewalld: update to 0.7.1
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-04 19:11:55 -07:00
Adrian Bunk
e5f1dbdca0 networkmanager: Correct the upstream version check
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-30 16:54:51 -07:00
Otavio Salvador
0027df7f53 networkmanager: Add sysvinit support
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-30 16:54:51 -07:00
Otavio Salvador
054fd87b62 networkmanager: Add a resolvconf PACKAGECONFIG
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-30 16:54:51 -07:00
Otavio Salvador
4a7e40887e networkmanager: Fix ADSL plugin packaging
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-30 16:54:51 -07:00
Changqing Li
95b316c701 kea: upgrade 1.5.0 -> 1.7.0
The license checksum change is due to the date being updated.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-28 12:49:37 -07:00
Callaghan, Dan
cddf038131 firewalld: add UPSTREAM_CHECK_URI
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-25 09:48:19 -07:00
Leon Anavi
6f560065cf mosquitto: update to 1.6.6
Fix security vulnerabilities. For further details, see:
https://mosquitto.org/blog/2019/09/version-1-6-6-released/

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-22 08:13:17 -07:00
Yi Zhao
ef1b17f4ef samba: upgrade 4.10.7 -> 4.10.8
Security fixes:

CVE-2019-10197: Combination of parameters and permissions can allow user
                to escape from the share path definition.

See: https://www.samba.org/samba/history/samba-4.10.8.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-17 07:22:52 -07:00